open-consul/agent/xds/testdata/rbac/default-deny-allow-deny.golden

{
  "name": "envoy.filters.network.rbac",
  "typedConfig": {
    "@type": "type.googleapis.com/envoy.config.filter.network.rbac.v2.RBAC",
    "rules": {
      "policies": {
        "consul-intentions-layer4": {
          "permissions": [
            {
              "any": true
            }
          ],
          "principals": [
            {
              "andIds": {
                "ids": [
                  {
                    "authenticated": {
                      "principalName": {
                        "safeRegex": {
                          "googleRe2": {

                          },
                          "regex": "^spiffe://[^/]+/ns/default/dc/[^/]+/svc/[^/]+$"
                        }
                      }
                    }
                  },
                  {
                    "notId": {
                      "authenticated": {
                        "principalName": {
                          "safeRegex": {
                            "googleRe2": {

                            },
                            "regex": "^spiffe://[^/]+/ns/default/dc/[^/]+/svc/web$"
                          }
                        }
                      }
                    }
                  }
                ]
              }
            }
          ]
        }
      }
    },
    "statPrefix": "connect_authz"
  }
}